# Plugin Page Bridge Contract

Plugin page runs with safe platform context.

## Host Context

- `pluginId`: installed plugin ID.
- `routeKey`: current plugin route.
- `serverInstanceId`: optional selected server instance.
- `themeTokens`: safe theme tokens.
- `permissions`: effective plugin permissions.

## Host APIs

- `api.request`: platform-scoped request only.
- `jobs.dispatch`: authorized job dispatch.
- `logs.query`: historical log query and analysis windows.
- `artifacts.open`: artifact upload/download references.
- `files.request`: scoped file operation requests.
- `remote.access.request`: declared logical remote-access or read-only query-template request.
- `run.distribution.request`: platform-mediated Run distribution request.
- `dependencies.request`: declared dependency check or install request.
- `logs.backfill.request`: bounded historical log backfill request.
- `client-manager.request`: Client Manager lifecycle request through Platform.
- `plugin-lifecycle.request`: declared plugin lifecycle request through Platform.
- `ai.invoke`: platform-mediated AI invocation.

The host intersects manifest-level and page-level permissions/actions before exposing context. SCUM pages receive only declared local-resource actions for 用户管理, 队伍管理, 实时地图, 礼包管理, and AI 助手; the host does not synthesize undeclared SCUM semantics.

## Forbidden

The host must not expose raw auth storage, AI keys, run credentials, host paths, or storage backend credentials.